Created Files

• %StartMenu%\spywarequake 2.0.lnk
• %ApplicationData%\microsoft\internet explorer\quick launch\spywarequake 2.0.lnk
• %Desktop%\spywarequake.lnk
• %ApplicationData%\\microsoft\internet explorer\quick launch\spywarequake.com 2.1.lnk
• %Desktop%\spywarequake.com.lnk
• %StartMenu%\spywarequake.com 2.1.lnk
• %ApplicationData%\microsoft\internet explorer\quick launch\spyquake2.com 2.3.lnk
• %Desktop%\spyquake2.com.lnk
• %StartMenu%\spyquake2.com 2.3.lnk

Created Folders

• %ProgramFiles%\spywarequake
• %StartupPrograms%\spywarequake
• %StartupPrograms%\spyquake
• %ProgramFiles%\spyquake

Registry Entries

• Key: HKEY_CLASSES_ROOT\interface\{189518df-7eba-4d31-a7e1-73b5bb60e8d5}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{23d627fe-3f02-44cf-9ee1-7b9e44bd9e13}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{43cfefbe-8ae4-400e-bbe4-a2b61bb140fb}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{5790b963-23c5-43c1-bcf5-01c9b5a3e44e}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{5d42ddf4-81eb-4668-9951-819a1d5befc8}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{76d06077-d5d3-40ca-b32d-6a67a7ff3f06}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{86c7e6c3-ec47-44e5-aa08-ee0d0a25895f}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{9283dac1-43f5-4580-bf86-841f22af2335}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{ae90cafc-09d4-47f0-9e11-ce621c424f08}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{ba397e39-f67f-423f-bc6e-65939450093a}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{bec8a83d-01d4-4f15-b8a9-4b4ab24253a7}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{c4eedc19-992d-409a-b323-ed57d511afa5}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{dd90f677-d205-4f70-9014-659614aabcb2}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{e3df91f3-f24f-441e-9001-d61f36024322}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{f459eadb-5903-48d5-864c-2b7b46ab1424}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{fc4edf66-0547-4f1a-ae96-7cfcad711c90}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\typelib\{661173ee-fa31-4769-97d4-b556b5d09bda}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\clsid\{e2ca7cd1-1ad9-f1c4-3d2a-dc1a33e7af9d}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\clsid\{5b55c4e3-c179-ba0b-b4fd-f2db862d6202}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{179518df-7eba-4d31-a7e1-73b5bb60e8d5}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{24d627fe-3f02-44cf-9ee1-7b9e44bd9e13}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{42cfefbe-8ae4-400e-bbe4-a2b61bb140fb}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{4790b963-23c5-43c1-bcf5-01c9b5a3e44e}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{5c42ddf4-81eb-4668-9951-819a1d5befc8}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{75d06077-d5d3-40ca-b32d-6a67a7ff3f06}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{85c7e6c3-ec47-44e5-aa08-ee0d0a25895f}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{9383dac1-43f5-4580-bf86-841f22af2335}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{af90cafc-09d4-47f0-9e11-ce621c424f08}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{bac8a83d-01d4-4f15-b8a9-4b4ab24253a7}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{bc397e39-f67f-423f-bc6e-65939450093a}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{c3eedc19-992d-409a-b323-ed57d511afa5}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{dc90f677-d205-4f70-9014-659614aabcb2}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{e2df91f3-f24f-441e-9001-d61f36024322}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{f259eadb-5903-48d5-864c-2b7b46ab1424}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{fb4edf66-0547-4f1a-ae96-7cfcad711c90}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\typelib\{651173ee-fa31-4769-97d4-b556b5d09bda}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{05f169e6-b9e9-4655-8718-b3390d7f603a}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{1fcc2003-c5eb-4ed6-a31a-85a7028c5f06}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{2557f3b3-37f3-45f5-b18a-985b0cd546f3}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{30686499-4f72-46e0-b4c7-0df36be1002f}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{36818356-5f51-47a0-bbcb-d2cf2578c009}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{5616709e-bb23-4d9f-a9b5-2472c769f73b}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{6a539d25-03b6-46e8-bdd1-889632109485}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{6b781c5a-1a96-49c3-b1a0-f8400d46701a}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{985f4791-def6-47b0-b4bc-94e49e03bdd2}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{9edf97a9-df39-4023-a73f-53146b61805a}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{a5e6fb36-865e-431b-ae48-6ed52e4a40e7}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{b7b6711f-40c0-49a8-9c46-ea5906f7264d}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{b8efa7b1-9614-4901-905d-698fc44926c9}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{c7f06087-64b9-45c7-a74a-a2052b87adf2}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{e6909c99-4605-4e46-a2d3-ede6d27d8539}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{fea247fa-3e92-4962-bd8f-454ce943d8a8}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\typelib\{f863fc64-e607-453d-a69b-03911b71707e}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{165e8c46-d58d-4a82-8a8b-5a16237715d4}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{350cf545-dd5a-4807-b02a-fa1b41339b29}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{4193bf7b-0c6c-4c23-b295-20f72f97938f}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{4201428f-7885-4513-b98e-bf6557375cf8}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{7227e56f-8fe9-4ff6-8bbf-537de39450e2}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{7bb9e6b0-96b6-41a6-b01e-363dcec652c9}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{835a4da1-778a-426b-af73-6a4c5e11b8b9}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{886903ce-0c3b-485c-8f90-582ec1d1cfa5}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{9adde7b5-93bb-46c9-ab5c-d975b7d32a16}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{a76556b1-6e37-49f3-8815-595f05a5b37a}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{a8d2dcea-d78e-486b-b43c-e2af008e782b}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{b44c56fd-31e9-4fae-a4de-60ede0f32b9e}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{ce557b85-753f-489e-b0cf-c90e0158371d}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{d198915a-8dbc-43fa-943a-d0e68f2275fa}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{d9e510c8-1ba8-4a3f-a06c-97286d11bf81}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{edc18412-24fd-43c7-8b38-5e67edb57db4}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\typelib\{5cb9686d-cc21-4927-b904-d91d4479f4bd}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{2dd8d482-8f1c-4180-aa8e-9d5819e5f2ea}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{411f83b1-a0ec-4155-af99-0137f5efb270}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{4e3645af-7a81-4f83-9b8c-1e4f930d873f}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{61032a65-2371-4c89-b5bb-df73090fb5ea}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{66189af2-7726-46e8-8628-0f95ab854792}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{7a2f6251-6c99-4da5-9827-954eb45dcb82}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{82c6c396-dd7b-4ce5-b668-c0087d1f3a1f}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{853e0d78-f4c2-47cb-a3f5-a774da60dfcd}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{94786c47-eb3f-4bd5-a66b-0d49e2c90541}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{9989a9bc-9828-467e-af06-e3b279e6e97b}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{b2b3702a-5425-489e-a3af-edccafeba019}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{c1c56112-2b2e-4d3c-8cfc-7e10c77facef}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{d01d4aab-22c5-427f-a941-c4b65a3d8a23}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{ddb0d689-fae0-4165-9f7c-877602f9dd66}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{e5ad5bd5-c710-45e0-abd3-e770fe85dae8}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{eb5ca3af-26c1-467b-9a55-2820e0451aab}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\typelib\{5e05ea9f-1ea7-4d0b-a09b-d5e29ec758b9}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{06364d26-c8df-4328-b38e-1064a4bbbf97}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{1dd37536-2ac7-444a-b59d-9f515af2979a}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{2c9badae-d7be-497c-9751-b0de10eea2c7}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{3b653a13-29c7-43c5-ae5b-677784b70f6d}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{3dd6957b-baaf-4a07-8737-3105f4f4083c}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{4ec3d6dc-1c07-425a-8e2f-534225ca46f7}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{6a777eaf-93fc-4314-a7cc-e2c9210ee1c1}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{6b967f78-be3e-4e66-8463-8bb69e187467}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{6d3b41e1-a473-4901-b29a-c7409a523b87}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{71fe0640-481b-4609-a13b-02ed7520512a}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{7468fad5-4d2f-4583-891b-5ef452af09fe}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{7de11e97-8466-4771-b70a-da7b99991d25}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{91bd6254-37e7-435a-8f2b-54219ba3ff60}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{a4e0da89-778b-48a8-a4cc-7136120d4f9b}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{a98a0961-ce4a-4f74-a6ae-236328c029c6}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{b29be866-0c95-46bf-8ad9-8db37245368a}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\typelib\{b3772ceb-4dbf-43ba-a0a1-83f2b6242526}
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
• Value: SpywareQuake*
• Data:
• Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler\{e2ca7cd1-1ad9-f1c4-3d2a-dc1a33e7af9d}
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\app paths\spywarequake.exe
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\spywarequake
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\app paths\spyware-quake.exe
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\spywarequake.com
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\software\spywarequake*
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\software\spywarequake.com
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\app paths\spy-quake2.exe
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\spyquake2.com
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\software\spyquake2.com
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
• Value: SpyQuake2.com
• Data:
• Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\app paths\spywarequaked.exe
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\spywarequaked
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\software\spywarequaked
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
• Value: spywarequaked
• Data: